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AMENDMENTS TO THE CLAIMS 
This listing of claims replaces all prior versions, and listings, of claims in the application: 
Listing of Claims; 

1. (Currently Amended) A method for ensuring that data generated by a client, a a 
untrusted entity, comprising a first computing device, and subsequently stored in a persistent 
storage of the untrusted entit y client have not been modified when the data are subsequently 
accessed for use by the xmtrusted e ntit y client . the method comprising: st e ps of: 

(a) the untrust e d entit y client sending first data related information to th e trusted 
eatit v a server for signature computation; 

(b) a trust e d e ntity. the server, comprising a second computing device, computing a 
signature for the first data related infomiation by employing utilizing a secure signinR algorithm 
and a key that is only known and available for use by the trusted entit y server; . to compute a 
signatur e for the first data r e lat e d information before the data are stored in the persistent storage 
by the untrust e d entity; 

(c) the trusted entit y server sending the signature to the untrusted entit y client for 
storage; 

(d) the client storing both the signature and the data in the persistent storage of the 

(e) before the data that were stored are subsequently used by the untrusted 
entityclient, the untrusted entit y client sending both second data related information and the 
sisjiature t o the trust e d entit y server to verify that the data that were stored have not been 
changed; 

(f) the trust e d entit y server generating a temporary signature of the second data 
related information by u tilizing the secure signing algorithm and t he key that is only known and 
available for use by the trust e d e ntit y server: to g e nerate a temporary signature of th e s e cond data 
related information s e nt to the trust e d e ntity; 

(g) the server comparing the temporary signature to the stored signature; and 

(h) when the temporary signature is equal to the stored signature, sending a positive 
result to the client; 

(i) when the temporary signature is not equal to the stored signature, sending a 
negative result to the client: 
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{j} the client receiving the result from the server and evaluating the result: 

(k) when the result is positive, the client using the data: and 

(1) when the result is negative, the client not using the data. 

(h) only using the data that were stored if th e step of comparing indicates that the 

signatures match and that the data that wer e stored have not been chang e d since the signature 
was comput e d before storing the data and th e signature. 

2. (Currently Amended) The method of Claim 1, wherein the first data related 
information is the same as the data, and the s e cond data relat e d information is the sam e as tho 
stored data. 

3-4. (Canceled) 

5. (Currently Amended) The method of Claim 1, wherein the first data related 
information comprises a digest of the data calculated by the client using a one-way hash fimction 
and the data, and the second data related information comprises a digest of the stored data 
calculated by the client using a one-way hash fimction and the stored data, w h e r e in the digoatn 
are calculat e d by th e untrust e d e ntity based on the data and stor e d data. 

6-7. (Canceled) 

8. (Currently Amended) The method of Claim 5, wherein the first data related 
information further comprises: 

(a) a signer identification (SID) for the untrusted entit y client , the signer (ID) SID 
uniquely identifying the untrusted entit y chent and not being controlled by an operator of the 




9-10. (Canceled) 
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11. (Currently Amended) The method of Claim 1, wherein the data comprise a plurality 
of different sets of data, further comprising the steps of: 

(a) obtaining a signer identification (SID) for the untrusted entit y client , the signer 
I BS ID uniquely indicating the untrusted entit y chent and not being controlled by an operator of 
the untrusted entit y chent ; 

(b) on the trusted entit y server , using the key for computing an intermediate key from 
a concatenation of an arbitrary value and the signer ID SID ; 

(c) sending the intermediate key from the trusted e ntit y server to the untrust e d 
eatit yclient ; 

(d) using the intermediate key to sign each set of the data to produce the signature for 
the set of data; and 

(e) storing the signature, the arbifrary value, and the sign e r ID SID on the persistent 
storage. 

12-13. (Canceled) 

14. (Currently Amended) The method of Claim 11, further comprising the step of 
determining if the sign e r ID SID that was received from the untrusted entit y chent is on a list of 
banned sign e r IDs SIDs, and if so, indicating in the result that the set of data are not usable by the 
untrust e d e ntit y chent . 

15-18. (Canceled) 
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19. (Original) A memory medium on which machine readable instructions are stored for 
carrjdng out the steps of Claim 1. 
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20. (Currently Amended) A untrusted e ntit y client , comprising a first gaming device, in 
which game session related data for use by the gaming device in subsequent gaming sessions are 
stored, the client further comprisinR: 

(a) a memory in which machine instructions are stored; 

(b) a persistent storage used to store data; 

(c) a network interface adapted to link the untrusted entit y client in communication 
over a network w ith a trusted entit y server . comprising a second computing device^ ov e r a 
n e twork; and 

(d) a processor coupled to the memory, the persistent storage, and the network 
interface, said processor executing the machine instructions to carry_out a plurality of functions, 
including: 

(i) before storin g sending game session related data, to the server obtaining to 
obtain a signature from the trust e d e ntit y server for the dat a, the signature d e termined 
calculated by the server u sing the game session related data and a key known only by a 
trusted entit y server and not available to the untrust e d e ntit y chent : 

(ii) receiving from the server the signature; 

(iii) storing the game session related data and the signatur e received from the 
server in the persistent storage; 

(iii)(iv} before using the game session related data that were stored in the 
persistent storage, obtaining a verification result from the trusted entit y server that 
indicatinR whether the game session related data have not been altere d, the result being 
obtained by: 

a) sending the game session related data and the signature to the 

server, 

b) the server calculating a new signature of the game session related 
data and comparing the new signature with the signature, 

c) when the new signature equals the signature, receiving a positive 
result from the server, 

d) when the new signature does not equal the signature, receiving a 
negative result from the server: as a function of th e signature: and 

(v) when the result is positive, using the game session related data: and 
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(vi) when the result is negative, not using the game session related data. 

(i¥) only using the game session related data that were stored if the step of 

obtaining the verification indicates that th e game session related data that were stored 
have not been changed since the signature was computed by the trusted entity before 
storing the game session related data and th e signatur e . 

21. (Currently Amended) The untrusted entit y client of Claim 20. wherein the machine 
instructions further cause the processor to compute a digest of the game session related data 
before the game session related data are stored in the persistent storage, said digest being sent to 
a trusted e ntit y the server for computing the signature. 

22. (Currently Amended) The untrust e d entit y client of Claim 21. wherein the machine 
instructions further cause the processor to store a signer identification ^DD) that is used in 
computing the signature, the signer ID SID uniquely identifying the untrust e d e ntit y client and 
being uncontrolled by the untrust e d entit y client or an operator of the untrust e d e ntit y client , so 
that the signature establishes a relationship between the game session related data before the 
game session related data are stored and the sign e r ID SID . 
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23. (Currently Amended) The untrust e d entit y client of Claim 20, wherein the game 
session related data comprises a plurality of sets of game session related data, and wherein the 
machine instructions further cause the processor to: 

(a) request an intermediate key from a trusted entit y the server for use in computing a 
signature of each set of the game session related data before the set is stored in the persistent 
storage, the intermediate key being determined as a function of a signer identification (SID) and 
an arbitrary value, the signer ID SID uniquely identifying the untrusted entit y client and being 
imcontroUed by the untrusted — estityclient or an operator of the untrust e d — ^ifeit vclient . said 
untrusted entit y client receiving the intermediate key, the arbitrary value, and the sign e r ID SID : 

(b) computing a digest of each set of the game session related data; 

(c) computing the signature of the digest for each set of the game session related data 
using the intermediate key; and 

(d) storing the signature, the arbitrary value, and the sign e r ID SID in the persistent 
storage. 

24. (Currently Amended) The untru s t e d e ntit y client of Claim 23, wherein before using 
the game session related data that were stored, the machine instructions further cause the 
processor to compute a temporary digest of the game session related data that were stored; and 
then send the temporary digest, and the signature, the arbitrary value, and the signer ID SID that 
were stored to a trusted e ntit y the server for verification that the game session related data and the 
signer ID SID have not been changed. 

25 - 26. (Canceled) 
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27. (Currently Amended) A trusted entit y server , comprising a first computing device, 
that is employed in determining whether data stored in a persistent storage on a client which 
comprises an untrusted entity, comprising a second computing device, have been altered since 
the data were initially stored, the server further comprising: 

(a) a memory in which machine instructions are stored; 

(b) a network interface adapted to link the trusted entit y server in communication over 
a network w ith a untrusted e ntit y client; ov e r a n e twork; and 




(c) a processor coupled to the memory, and the network interface, said processor 
executing the machine instructions to carryout a plurality of functions, including: 

(i) receiving the data firom the client: 

(ii) computing a signature for the data by utilizing e mploying a key that is 



the data before the data are stored in a persistent storage by a xmtrust e d e ntit yt he client:^ 

(iii) sending s ad -the signature b e ing s e nt to the client a untrust e d entity and to 

be stored in a persistent storage in association with the data; aad 

(iv) receiving second data and the signature from the chent; 

(vi) computing a temporary signature using the second data and the key that is 

only known and available for use by the server: 

(v) comparing the temporary signature and the signature: 

(vii) when the temporary signature is equal to the signature, sending a positive 

result to the client; and 

(viii) when the temporary signature is not equal to the signature, sending a 

negative result to the client. 

(ii) befor e the data that were stored ar e subsequently used by a untrust e d 

entity, utilizing the k e y Icnown only to the trusted entity to comput e a temporary signatur e 
for the stored data to facilitat e a v e rification that the data that w e r e stored hav e not been 
alter e d. 

28. (Cancelled) 




only known and available for use by the 




it yserver to comput e a signature for 



Page 9 of 15 



Application No. XOmimo 
Amendment "D" dated August 1, 2008 
Reply to Office Action mailed June 18, 2008 

29. (Currently Amended) The trusted entit y server of Claim 27, wherein the machine 
instructions further cause the processor to compute the signature based upon a digest of the data 
that is to be stored, where the digest is received from the chent. an untrusted entity. 

30. (Currently Amended) The trusted entit y server of Claim 27, wherein the machine 
instructions further cause the processor to use the key in determining the signature from a 
concatenation of a digest of the data that is to be stored and a signer identification (SID) uniquely 
identifying a untrust e d entit y client on which the data are to be stored, wherein the sign e r ID SID 
is uncontrolled and unalterable by the untrust e d ontit y client and an operator of the untrusted 
^rtit vclient, the signer ID SID being sent by the trust e d entit y server to the untrusted e ntit y client 
with the signature. 



31. (Currently Amended) The trust e d entit y server of Claim 30, wherein the machine 
instructions further cause the processor to receive a temporary digest of the data that had been 
stored on a untrust e d e ntit y client and the sign e r I D SID that had been stored on the untrusted 
^rtit yclient. and compute a temporary signature of a concatenation of the sign e r ID SID and the 
temporary digest usmg the key, and then to verify whether the data or the signer ID SID that were 
stored were altered, by comparing the temporary signature with the signature, before sending a 
result of the comparison to the untrust e d ontit y client . 

32. (Currently Amended) The trusted e ntity server of Claim 27, wherein the machine 
instructions further cause the processor to respond to a request for an intermediate key from a 
untrusted entit y client by computing the intermediate key from an arbitrary value and a signer 
identification (SID) uniquely identifying the untrusted entit y client , wherein the si.s^ier ID SID is 
uncontrolled and unalterable by the untrusted entit y client and an operator of the untrusted 
efttitycHent, the trusted entity then sending the intermediate key, the arbitrary value, and the 
signer ID SID to the untrust e d e ntit y client to enable the untrusted e ntit y client to store the 
arbitrary value, and the sign e r ill SID and to use the intermediate key to sign each of a plurality of 
sets of the data before storing the sets of the data. 
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33. (Currently Amended) The trusted entit y server of Claim 32, wherein the machine 
instructions further cause the processor to: 

(a) receive a temporary digest of a set of data that had been stored, along with the 
signature, the arbitrary value, and the signer ID SID that were stored; 

(b) compute a temporary intermediate key by using the key to sign the signer ID SID 
and the arbitrary value that were received; 

(c) compute a temporary signature for the set of data using an intermediate key; 

(d) compare the temporary signature and the signature to verify whether the set of 
data or the signer ID SID that have been stored have been altered; and 

(e) sending a result of the comparison to the untrust e d e ntit v client . 



34-36. (Canceled) 
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